Hunt List
12,842 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-72130 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: | |
|
80
|
CVE-2026-72398 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: sctp: add I | |
|
80
|
CVE-2026-72592 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows | |
|
80
|
CVE-2026-17083 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary | |
|
80
|
CVE-2026-16845 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16862 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16864 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16872 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16885 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16894 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16913 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17040 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17122 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17141 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17152 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17157 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-63508 |
10.0 | 0.0080 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function in Microsoft Planetary Computer Pro | |
|
80
|
CVE-2026-65667 |
10.0 | 0.0080 | NET NO AUTH LOW CX NO UI | Missing authorization in Microsoft Teams allows an unauthorized attacker to elev | |
|
80
|
CVE-2026-69502 |
10.0 | 0.0080 | NET NO AUTH LOW CX NO UI | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized | |
|
80
|
CVE-2026-69555 |
10.0 | 0.0080 | NET NO AUTH LOW CX NO UI | Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate | |
|
80
|
CVE-2026-69865 |
10.0 | 0.0080 | NET NO AUTH LOW CX NO UI | Authorization bypass through user-controlled key in Microsoft Container Registry | |
|
80
|
CVE-2026-83711 |
10.0 | 0.0080 | NET NO AUTH LOW CX NO UI | Authorization bypass through user-controlled key in Microsoft Azure Active Direc | |
|
79
|
CVE-2026-58466 |
9.3 | 0.0080 | NET NO AUTH LOW CX NO UI | AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability | |
|
78
|
CVE-2026-64320 |
9.1 | 0.0080 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix | |
|
77
|
CVE-2026-68749 |
8.2 | 0.0080 | NET NO AUTH LOW CX NO UI | Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in r | |
|
77
|
CVE-2026-68750 |
8.2 | 0.0080 | NET NO AUTH LOW CX NO UI | Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrre | |
|
75
|
CVE-2026-25703 |
7.3 | 0.0080 | NET NO AUTH LOW CX NO UI | NeuVector through 5.4.9 is can potentially leak information from manager /networ | |
|
75
|
CVE-2026-111765 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starti | |
|
75
|
CVE-2026-28952 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | An integer overflow was addressed with improved input validation. This issue is | |
|
75
|
CVE-2026-26164 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in a command ('command injectio | |
|
75
|
CVE-2026-71559 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in the Go implementation of Apac | |
|
70
|
CVE-2026-34048 |
9.9 | 0.0080 | NET LOW CX NO UI | Coolify is an open-source and self-hostable tool for managing servers, applicati | |
|
69
|
CVE-2026-64878 |
9.4 | 0.0080 | NET LOW CX NO UI | Unvalidated input in asset filter parameters allows shell metacharacters to esca | |
|
68
|
CVE-2026-97753 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97755 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to | |
|
68
|
CVE-2026-97759 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Use after free in Microsoft Office Excel allows an unauthorized attacker to exec | |
|
68
|
CVE-2026-72778 |
8.7 | 0.0080 | NET LOW CX NO UI | Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 | |
|
68
|
CVE-2026-13716 |
9.1 | 0.0080 | NET LOW CX NO UI | Path traversal in server import and admin file upload in Crafty Controller. Allo | |
|
68
|
CVE-2026-70007 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute | |
|
68
|
CVE-2026-65423 |
8.7 | 0.0080 | NET LOW CX NO UI | An integer overflow in the UA_Variant arrayDimensions product computation in op | |
|
68
|
CVE-2026-69521 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker | |
|
68
|
CVE-2026-69765 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Use after free in Windows Storport Miniport Driver allows an unauthorized attack | |
|
68
|
CVE-2026-69985 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker | |
|
66
|
CVE-2026-83522 |
8.1 | 0.0080 | NET NO AUTH NO UI | Reliance on untrusted inputs in a security decision in Windows IKE Extension all | |
|
66
|
CVE-2026-83914 |
8.1 | 0.0080 | NET NO AUTH NO UI | Use after free in Microsoft XML allows an unauthorized attacker to execute code | |
|
66
|
CVE-2026-68746 |
7.7 | 0.0080 | NET LOW CX NO UI | Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook all | |
|
65
|
CVE-2026-13583 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the functi | |
|
65
|
CVE-2026-18895 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacte | |
|
65
|
CVE-2026-18897 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. T | |
|
65
|
CVE-2026-18898 |
7.4 | 0.0080 | NET LOW CX NO UI | A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. Thi |